A caveat: the notarization is not forced. Apps can still run even if they aren't notarized, it just takes an extra click.